{"id":"CLSA-2026-1777040144","summary":"subversion: Fix of CVE-2017-9800","details":"- CVE-2017-9800: fix arbitrary code execution via crafted svn+ssh:// URLs\n  by validating the decoded hostinfo and adding an end-of-options guard\n  to the default svn+ssh and example rsh tunnel commands","modified":"2026-05-27T11:18:10.395096287Z","published":"2026-04-24T20:48:46Z","upstream":["CVE-2017-9800"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777040144.html"}],"affected":[{"package":{"name":"mod_dav_svn","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/mod_dav_svn?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-gnome","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-gnome?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-javahl","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-javahl?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-kde","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-kde?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-perl","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-perl?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-ruby","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-ruby?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}},{"package":{"name":"subversion-svn2cl","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/subversion-svn2cl?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.11-15.el6_7.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1777040144.json"}}],"schema_version":"1.7.5"}